Restricting phone access for Telegram bot?

Question

Bots

Good afternoon!

There is a Telegram bot that issues data from the database upon request: phone, mail, etc.
At the same time, the bot itself collects data from those who installed it, including coordinates, groups it belongs to, a list of contacts and photos.
Question: Is there a mechanism for restricting bots in terms of the data on the device to which they can access? Or does it turn out that any installed bot has the rights that the developer has given it?

Answer 1

At the same time, the bot itself collects data from those who installed it, including coordinates, groups in which it is a member, a list of contacts and photos.

bot can't do that

Answer 2

Write what commands your bot receives user coordinates, contacts.